An access control vulnerability (CWE-863) exists in Nozomi Networks Guardian's Threat Intelligence functionality where users with view-only privileges can execute administrative actions due to improper enforcement of access restrictions. This allows such users to modify rules configuration or affect the availability of the Threat Intelligence feature. The vulnerability is authenticated and remote exploitable with low attack complexity and no user interaction required. The CVSS 4.0 vector indicates high impact on integrity and availability. No patch or official remediation level has been published by the vendor as of the data provided.

An authenticated user with limited (view-only) privileges can escalate their permissions to perform administrative actions within the Threat Intelligence functionality. This can lead to unauthorized modification of rules configuration and potential disruption of service availability. The integrity and availability of the Threat Intelligence feature are impacted, which may affect security monitoring and response capabilities.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Threat Intelligence functionality to trusted users only and monitor for unusual administrative activity by users with view-only privileges.